Sicial Engineering

Question 1

List the 6 main types of motivational triggers

Answer 1

• Authority
• Urgency
• Social Proof
• Fear
• Scarcity
• Likeability

Question 2

What is meant by social proof

Answer 2

Psychological phenomenon where individuals look to the behaviors and actions of others to determine their own decisions or actions in similar situations 1/6 motivational triggers.

Question 3

What is meant by scarcity

Answer 3

Psychological pressure people feel when they believe a product, opportunity, or resource is limited or in short supply

Question 4

Mention 3 forms of likeability

Answer 4

• Sexual Attraction
• Pretending to be a friend
• Common Interest

Question 5

What are the 4 main forms of impersonation used by attackers ?

Answer 5

• Impersonation
• Brand Impersonation
• Typosquatting
• Watering Hole Attacks

Question 6

How can you mitigate impersonation?

Answer 6

Organizations must provide security awareness training to their employees on a regular basis so that they remain vigilant against future attacks.

Question 7

What are ways you can protect against brand impersonation?

Answer 7

○ Educate their users about these types of threats
○ Use secure email gateways to filter out phishing emails
○ Regularly monitor their brand’s online presence to detect any fraudulent activities as soon as they occur

Question 8

What is known as typo-squatting?

Answer 8

Also known as URL hijacking or cybersquatting, refers to a cyber attack where an attacker will register a domain name that is similar to a popular website but contain some kind of common typographical errors.

Question 9

How can an organisation combat typo squatting?

Answer 9

○ Register common misspellings of their own domain names
○ Use services that monitor for similar domain registrations
○ Conduct user security awareness training to educate users about the risks of typosquatting

Question 10

What are Watering Hole Attacks?

Answer 10

Targeted form of cyber attack where attackers compromise a specific website or service that their target is known to use.

Question 11

How can an organisation mitigate watering hole attacks?

Answer 11

○ Keep their systems and software updated
○ Use threat intelligence services to stay informed about new threats
○ Employ advanced malware detection and prevention tools